WEBVTT

1
00:00.000 --> 00:04.200
So for our VRF light game plan, let's do the following.

2
00:04.200 --> 00:08.100
Let's implement this topology with two VRFs,

3
00:08.100 --> 00:11.000
one for customer blue, one for customer green,

4
00:11.000 --> 00:14.600
including the use of tier one gateways for each of those

5
00:14.600 --> 00:17.000
and segments for each of those customers as well.

6
00:17.000 --> 00:18.700
So as part of that, we're going to need to clean up

7
00:18.700 --> 00:19.800
our existing topology.

8
00:19.800 --> 00:22.200
And then once it's all cleaned up from scratch,

9
00:22.200 --> 00:25.400
we need to go ahead and deploy our tier zero gateway.

10
00:25.400 --> 00:27.000
And that's this one right here.

11
00:27.000 --> 00:28.200
So that has to be in place.

12
00:28.200 --> 00:30.800
We also need to associate it with uplinks to talk to the
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

12
00:28.200 --> 00:30.800
We also need to associate it with uplinks to talk to the

13
00:30.800 --> 00:32.600
external routed environment.

14
00:32.600 --> 00:34.800
And then once we have that in place, we can then go ahead

15
00:34.800 --> 00:38.000
and start carving out individual VRFs for the additional

16
00:38.000 --> 00:39.000
customers that we have.

17
00:39.000 --> 00:41.000
So in our example, we're going to use two customers,

18
00:41.000 --> 00:43.600
the blue customer and the green customer.

19
00:43.600 --> 00:46.600
So for the T zero deployment, let's use an external segment

20
00:46.600 --> 00:49.100
with VLAN 21.

21
00:49.100 --> 00:51.300
And so on that segment, that external segment,

22
00:51.300 --> 00:54.700
we're going to use 10 dot 21 dot zero dot zero

23
00:54.700 --> 00:56.200
with a 24-bit mask.

24
00:56.200 --> 00:58.700
And then for the two edge nodes that will incorporate

25
00:58.700 --> 01:02.900
on that subnet, let's go ahead and use edge one at dot 61
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
00:58.700 --> 01:02.900
on that subnet, let's go ahead and use edge one at dot 61

26
01:02.900 --> 01:05.200
and edge two at dot 62.

27
01:05.200 --> 01:07.400
So once we have our T zero in place, we can then go ahead

28
01:07.400 --> 01:11.000
and create a T zero VRF and we'll start off with blue.

29
01:11.000 --> 01:14.400
So our next step will be to deploy the blue VRF.

30
01:14.400 --> 01:16.900
And for that one, for its connectivity up to the external

31
01:16.900 --> 01:20.400
network to the edge router, we're going to use VLAN 23

32
01:20.400 --> 01:24.200
and its IP dressing space is 23 dot 1 dot 2 dot zero

33
01:24.200 --> 01:25.400
with a 24-bit mask.

34
01:25.400 --> 01:28.000
And the default gateway up there is at dot 1.

35
01:28.000 --> 01:31.100
And once again, for edge one, we'll use dot 61
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

35
01:28.000 --> 01:31.100
And once again, for edge one, we'll use dot 61

36
01:31.100 --> 01:33.600
and for edge two, we'll use dot 62.

37
01:33.600 --> 01:36.100
And for simplicity, we're just putting one external router

38
01:36.100 --> 01:37.500
out here, but this would represent, for example,

39
01:37.500 --> 01:38.900
a top of rack router.

40
01:38.900 --> 01:41.600
And so in the production environment for fault tolerance,

41
01:41.600 --> 01:44.300
we'd have one of our edges go to one of our top of rack routers

42
01:44.300 --> 01:46.900
and the other edge going to the second router.

43
01:46.900 --> 01:49.500
But again, for simplicity, I'm just putting one external router

44
01:49.500 --> 01:52.400
out here to save us a bit of time during the configuration.

45
01:52.400 --> 01:55.000
So then once we have this blue VRF in place,

46
01:55.000 --> 01:57.500
we can then go ahead and create our blue tier one gateway.

47
01:57.500 --> 01:58.700
So that'll be right here.

48
01:58.700 --> 02:00.700
So once that's in place, we can create our segment
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
01:58.700 --> 02:00.700
So once that's in place, we can create our segment

49
02:00.700 --> 02:03.000
and then finally go ahead and test.

50
02:03.000 --> 02:04.400
So here's what I propose we do.

51
02:04.400 --> 02:07.700
We'll do all these step by step for the benefit of getting

52
02:07.700 --> 02:09.900
the initial tier zero gateway up and running

53
02:09.900 --> 02:14.400
and the blue VRF and the blue tier one and the network segment here.

54
02:14.400 --> 02:17.400
And then once we do all of that, it's simply a repeat process

55
02:17.400 --> 02:20.600
for doing it once again for our second VRF,

56
02:20.600 --> 02:22.100
which is going to be the green VRF.

57
02:22.100 --> 02:24.700
So effectively, we just logically repeat this process.

58
02:24.700 --> 02:26.800
So for the green VRF, the only difference would be

59
02:26.800 --> 02:29.900
instead of using VLAN 23 is we're going to be using over here

60
02:29.900 --> 02:30.800
for blue.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

60
02:29.900 --> 02:30.800
for blue.

61
02:30.800 --> 02:34.600
Let's use VLAN 24 over here for the green.

62
02:34.600 --> 02:37.400
And then for the tier zero gateway, we're going to be using VLAN 21.

63
02:37.400 --> 02:41.500
So for the blue customer, let me go ahead and put this as 23.1.2.0

64
02:41.500 --> 02:43.000
with a 24-bit mask.

65
02:43.000 --> 02:46.100
And when we get to green for the VLAN 24 connection,

66
02:46.100 --> 02:49.600
that'll be 24.1.2.0 with a 24-bit mask.

67
02:49.600 --> 02:53.800
And in all cases, the external router on those three VLANs is at dot one.

68
02:53.800 --> 02:56.500
And it just occurred to me that if we go through all this for blue

69
02:56.500 --> 02:59.300
and then we also as validation do it again for green,

70
02:59.300 --> 03:00.700
that might take quite a bit of time.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

70
02:59.300 --> 03:00.700
that might take quite a bit of time.

71
03:00.700 --> 03:04.900
So as a preemptive step, I'm going to go ahead and off camera.

72
03:04.900 --> 03:09.100
I'm going to simply remove all of our existing tier zero and tier one

73
03:09.100 --> 03:10.500
gateways that we currently have.

74
03:10.500 --> 03:12.400
So I'll take care of that on my own.

75
03:12.400 --> 03:15.900
So our next logical step together then would be as part of our game plan

76
03:15.900 --> 03:19.800
to go ahead and start the initial deployment of our tier zero gateway.

77
03:19.800 --> 03:21.800
And we'll do that in the next video.

78
03:21.800 --> 03:44.820
[no audio]
